PhysicalFinancial ServicesFinanceTheftCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

U.S. Bank National Association

bd_cd13d7021d30dfcd · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Oct 14, 2020

To disclose

—

Affected

15state residents only

Confidence

66%

U.S. Bank National Association notified Montana residents that a computer server containing personal information (names, account numbers, SSNs, driver's license numbers) was physically stolen from a corporate office on July 30, 2020. The bank offered two years of credit monitoring and identity restoration services via TransUnion and provided instructions for fraud alerts and credit freezes.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 30, 2020

Begins

Oct 14, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed15 affectedView incident

Name: U.S. Bank National Association
norm: u.s. bank

Name: U.S. Bank National Association
norm: u.s. bank
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jul 30, 2020
Materiality determined: —
Notification sent: —
Affected individuals: 15state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: ExternalFinancial

During the incident: Arranged for free credit monitoring and identity restoration services for two years provided by TransUnion Interactive
Offered new account numbers at no charge by calling Fraud Liaison Center
Working with authorities to recover the stolen server
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/usSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 14, 2020
Raw hash: 85acbeae71b8465f71d5bf38ca22e816e3f2576c882b812c02fa8529147706fa

Reporting entityU.S. Bank National Association

Victim entityU.S. Bank National Association

IncidentUnauthorized Access

Stated responseArranged for free credit monitoring and identity restoration services for two years provided by TransUnion Interactive

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov